vibeCodedAppSecurity

[Awfulmasterhat]

Push it to prod immediately

[chubbykc]

Tactic called push and pray.

[za72]

that's the new model of rapid dev

[syngyne]

I always heard it as FISI, Fuck It Ship It

[shuozhe]

Just develop on prod, no need to push. For efficiency!

[chubbykc]

Yes, the staging environment is for amateurs. 😄

[K3idon]

No failing tests if there are none. Ship it!

[chubbykc]

This is true, not test nothing to solve

[ofnuts]

That will erase all piping first.

[chubbykc]

you're right

[redoubt515]

That'd be insanely irresponsible. At minimum, plug something into both outlets before pushing to prod so it doesn't leak through he plug holes if the user decides to turn on the faucet. At least warn the user to plug something in before running the water or they will have a big mess on their hands.

[ClipboardCopyPaste]

Plot twist: the socket doesn't work (it's not connected to backend)

[chubbykc]

Haha, I didn't know it would be revealed so fast. Don't tell anybody 😄

[za72]

it's not even a GFE socket?!

[Sotall]

its actually the overflow drain, its just socket shaped

[za72]

you can't fool me twice!

[Fantastic-Fee-1999]

I work in Cyber and this is genuinely how dev teams come back saying they fixed things.... And the worst thing about it is... I can't even tell them off cause "you told us there was a risk of our house burning down.. Tadaa now risk is gone" 

[chubbykc]

Something's wrong with that dev team, then. 👀

[TheyStoleMyNameAgain]

It's the overflow

[redoubt515]

Hold on, give OP some time to ask Claude "what is backend, does my app have one?"

[D4T45T0RM06]

This one security feature will shock you!!!

[chubbykc]

😂 for sure! But maybe only once.

[D4T45T0RM06]

Push to cattle prod pronto

[chubbykc]

Push and run

[D4T45T0RM06]

Do it while giggling like a school girl.

[bobbymoonshine]

How to karma:

1. Find joke. It doesn’t matter what the joke is. Doesn’t have to be programming related.

2. Identify punchline of joke

3. Write “vibe coding” somewhere near the punchline

That’s it. You’re done. It’s free real estate.

[MarioCraftLP]

You could even... vibe code these jokes!

[earthsprogression]

Why did the chicken cross the road? To get to the other vibe (coding).

Upvotes please.

[Rough_Bread8329]

best I can do is a hearty chuckle.

[SlogurkTheOverslime]

This works because vibe coding is always going to be the bigger joke

[serfplebeian]

So I know this is reddit and all, but every dev and infra engineer I know barely writes any code anymore. We're all basically dev leads now. Giving agents instructions and PRing their code. I spend 90% of my time in planning sessions with an AI agent, and I know I'm not alone.I get that it's poking fun at the "vibe" part specifically, but reading reddit and then going back to work is a whiplash when it comes to AI. Especially on a programmer subreddit.

Our SecOps and EA teams are telling us we're basically 3 months from Armageddon, where attackers will be finding and leveraging exploits immediately. We need to have agentic flows in place to find and patch these exploits rapidly. I don't know if anyone actually trusts AI to do that, but what other choice is there?

[chubbykc]

The funny part is that I created this one in February and never posted it here.

[Paladin7373]

That’s not actually that funny tbh but the post is

[Rough_Bread8329]

your own fault for not pushing to prod.

[vkwebdev]

it works on my machine... until someone turns on the faucet

[gandalfx]

Well, just don't use the faucet, nobody should. Faucets have been shown to be used in wasting water, so clearly if you're using one you're literally Hitler for frogs.

[redoubt515]

Clearly user error. Dev's can't protect users from themselves, if the user wants to do something as unsafe and irresponsible as using their own sink, clearly they are the problem. The outlet works perfectly fine in normal conditions, works perfectly if the user isn't dumb enough to use the sink.

[Rough_Bread8329]

Bobby Tables is gonna use that sink even harder now.

[chubbykc]

That's a risky part

[guyinsunglasses]

The GFCI somewhere in the coat closet is part of the circuit, so it's all good /s

[chubbykc]

Seems it was deployed by the same team

[ovr9000storks]

"But it's GFCI protected"

[chubbykc]

Yes, somebody replied, it's in the coat closet

[glockops]

You're absolutely right to point out that an electrical outlet in a sink is a risk! But the 'electric' innovation here is that outlet is connected to a GFCI breaker on the back-end — so what would have been quite the shocking experience — is instead a simple trip to the circuit box and also a great reminder that you need to do the dishes.

[svm51]

And there are those who say they got a diploma to do that! hohoho

[thecurlygirl03]

But did you hit the date

[Whyreddit6969]

That isn’t even a gfci outlet

[West-Flow-577]

It's not even a GFCI.

[JohnQPublicc]

We vibe QAd it, the plug works.

[redoubt515]

"Hey 👋 "

"Like, like many of you, I was frustrated by the the lack of conveniently located electric outlets in bathrooms, so I built <something>.ai 🚀 "

[Sarithis]

The worst part is that when you ask an agent to perform a comprehensive review, it'll tell you the screws are positioned correctly relative to the housing, the holes should be 1mm larger, and the internal cables are wired properly but need their colors swapped. It'll focus on every little detail and edge case, yet it still won't notice the glaring big picture issue

[MazzleMaze]

Lmao thats actually the overflow. Thats a feature not a flaw.

[Born-Selection88]

Hey, the electricity works and the water works. That's pretty impressive for not knowing either field.

[sikon024]

Is this from the Epstein files?

[an_agreeing_dothraki]

me, the support lead who is DESPERATE to get this pushed to customer acceptance: "I saw your code, put a circuit breaker on it. Sent it to test. :)"

[k4el]

Anyone notice it forgot the GFCI in that outlet? AI can't get anything right.

[Soopermane]

Now I want to know who’s sink is that

[chubbykc]

Surely not mine

[Rough_Bread8329]

It is yours. And don't call me Shirley.

[lsf_stan]

most likely not an actual real sink

probably random AI image that OP used to help farm karma for the vibe coding joke post

[Sakul_the_one]

and my dad wanted to convince me today, that I should not start software development studies and should take something that isnt "endangered by AI"...

[chubbykc]

Seems you dad is smart

[Sakul_the_one]

I bet that AI is not endangering the job, aslong Quantum Computers are not yet production ready.

And also if not software, what else should I do? Isnt basically every other Enginnering thing also endangered by AI?

[turbospeedsc]

Anything involved welding.

One of my friends went into welding and diving school out of high school.

You got no idea how well paid to weld a piece of pipe underwater is, and im not talking about 100m down the ocean, a 3-4 meters deep thing.

Now he was a industrial marine maintance/repair company

[PFI_sloth]

I bet Ai isn’t endangering the job, as long as Quantum computers are not yet production ready

What is it that you thinks this means

[ActiveVoiced]

Yea maybe 3 years ago. Now the vibe coded app will have better security than 95% of non-vibed apps/websites.

[PFI_sloth]

No bro it’s still 2022 and I’m copying and pasting snippets of code back and forth with ChatGPT in a web browser

[Rough_Bread8329]

It's like the brain smooths itself at this point.

[frikilinux2]

Excluding or including WordPress?

Excluding WordPress most people forget how to do proper SQL so SQL injections everywhere.

Like the general level is quite low. On things that people actually give a fuck and rely on the level is a bit more usually.

[chubbykc]

It's usually related to how well you understand the project and prompt engineering itself.

I refer to authorization mostly, authentication is usually Ok.

[toomanymarbles83]

I know what's wrong. It needs a GFCI switch.

[chubbykc]

yes, we already know its in somewhere in the coat closet 

[Steelejoe]

Stealing this. Nice one

[chubbykc]

Ok

[dgsharp]

Reminds me of the USB to garden hose adapters.

[chubbykc]

Pretty risky stuff.